Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/74D39070B74C11EDAB90EAE9F1222468.roa
File: 74D39070B74C11EDAB90EAE9F1222468.roa (raw, json)
Hash identifier: gbu+Z+jz1YSL3BDwKIMynfpd4i67pfEHouGPluMYkVw=
Subject key identifier: DB:B8:C3:E7:E3:54:BF:EC:BF:B5:6F:1C:EB:D4:DE:84:DE:CA:2B:67
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C7B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/74D39070B74C11EDAB90EAE9F1222468.roa
Signing time: Tue 28 Feb 2023 09:44:12 +0000
ROA not before: Tue 28 Feb 2023 09:44:08 +0000
ROA not after: Fri 28 Feb 2025 09:44:08 +0000
asID: 61317
IP address blocks: 154.16.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3195 (0xc7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 28 09:44:08 2023 GMT
Not After : Feb 28 09:44:08 2025 GMT
Subject: CN=63fdccec-0f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:a4:3a:10:71:3b:83:ed:37:9d:b7:cc:d2:
e9:df:0b:ed:a4:75:ef:b6:91:b2:06:eb:af:8c:1d:
a1:f5:16:66:5a:93:db:c2:d7:7e:fa:81:d2:fa:c4:
95:ac:c9:e9:c3:b8:36:87:0a:90:30:69:f0:a6:9e:
5e:df:02:ba:8a:02:a0:94:a8:6f:b8:98:14:d9:37:
91:52:8a:d4:e3:dd:b3:0f:c2:57:7a:9a:49:d2:5d:
27:fb:8e:4d:d2:15:e7:24:1a:16:69:91:2a:82:08:
01:24:ee:7f:76:33:03:db:35:5c:90:b7:09:59:7e:
e1:34:aa:d3:6c:90:49:92:6a:3b:7a:52:8e:3a:67:
10:0a:39:8e:14:7b:94:19:fd:45:70:d5:83:18:bf:
47:c4:cf:90:b7:89:01:ea:ce:2c:fd:fb:d1:a8:79:
ca:a1:60:26:2c:25:97:97:2b:d7:8f:7f:36:d3:a7:
5e:76:42:fd:f3:70:59:11:ef:21:52:22:3f:4c:5b:
16:ad:50:a6:9c:6d:b4:fe:a1:06:b2:a1:3a:06:7d:
29:f0:7f:0c:3b:f6:c9:21:c5:5c:b2:e5:dc:a0:84:
1d:e0:44:fa:22:36:3c:d6:98:e5:ab:ef:35:32:c6:
33:94:85:44:2f:ad:a5:55:3d:1c:ad:59:7d:d0:f5:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B8:C3:E7:E3:54:BF:EC:BF:B5:6F:1C:EB:D4:DE:84:DE:CA:2B:67
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/74D39070B74C11EDAB90EAE9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d3:7b:99:44:cc:91:de:4f:67:49:d7:db:fb:29:e3:58:08:
4a:1b:04:c9:66:30:1d:a7:7d:f8:ba:1b:dd:09:6c:b6:59:5b:
6f:2e:cf:be:0d:00:31:d6:41:9e:aa:ae:ff:da:a7:e9:1a:f6:
e7:0a:f3:4e:6b:99:68:c9:2a:91:a5:52:aa:59:87:1a:5b:e6:
b8:43:29:6a:8d:a8:2a:02:00:75:8d:55:78:4b:37:b6:ca:9c:
76:d6:cd:0a:6c:77:75:e8:e4:fe:56:02:6f:17:16:e2:4c:2b:
eb:65:f2:09:f9:67:b9:07:47:f3:dc:ad:75:df:4e:3e:24:ed:
64:6d:ba:1d:12:86:da:b1:0a:07:17:5e:32:ce:20:a9:e5:fb:
ec:fe:d4:56:d7:af:e1:d3:f2:0f:0b:5b:3f:b6:6b:2d:67:a7:
cb:1f:50:74:00:7e:fd:72:26:d3:43:b3:cd:26:c3:56:16:e6:
0e:d4:8d:b9:da:15:33:94:10:c8:42:02:04:f0:a8:06:50:79:
35:7e:74:7c:40:cf:57:0a:a0:dd:f0:a3:c0:27:8d:d8:e5:65:
11:86:71:af:a6:41:15:ff:5a:db:82:f0:07:c6:04:26:ad:a2:
c7:76:eb:40:60:45:2b:bd:8b:0e:cb:20:e8:93:5d:41:03:74:
a1:df:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 08:14:49 2024 by rpki-client on console-ams.rpki-client.org